Cisco researchers estimate the botnet may have earned its owner $5,000 worth of monero since it started operation four months ago.